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EXAMINER'S AMENDMENT 

1. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Seth Milman on 12/14/2009. 

The application has been amended as follows: 

Claim 4. (Currently Amended) A method of verifying a program fragment 
downloaded onto a reprogrammable embedded system, equipped with a rewritable 
memory, a microprocessor and a virtual machine equipped with an execution stack and 
with operand registers, said program fragment consisting of an object code and 
including at least one subprogram consisting of a series of instructions manipulating 
said operand registers, said microprocessor and virtual machine configured to interpret 
said object code, said embedded system being interconnected to a reader, wherein 
subsequent to a detection of a downloading command and a storage of said object code 
in said rewritable memory, said method, for each subprogram, comprises: 

initializing a type stack and a table of register types through data representing a 
state of said virtual machine on initialization of an execution of said temporarily stored 
object code; 

carrying out a verification process of said temporarily stored object code 
instruction by instruction, by discerning an existence, for each current instruction, of a 
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target, a branching-instruction target, a target of an exception-handler call or a target of 
a subroutine call, and, said current instruction being a target of a branching instruction, 
said verification process including verifying that said type stack is empty and rejecting 
said program fragment otherwise; 

verifying and updating an effect of said current instruction on the data types of 
said type stack and of said table of register types including: 

verifying that said type stack includes at least as many entries as said current 
instruction includes operands: 

unstacking and verifying that types of entries at the top of said stack are 
subtypes of the types of said operands of said current instruction: and 

stacking data types which are assigned to said results on said stack : 

said verification process being successful when said table of register types is not 
modified in the course of a verification of all said instructions, and said verification 
process being carried out instruction by instruction until said table of register types is 
stable, with no modification having taken place, said verification process being 
interrupted and said program fragment being rejected, otherwise. 

Claim 12. (Currently Amended) The method of claim 4, wherein said verifying 
and updating includes , at le ast : 

v e r i fy i ng that sa i d typ e stack i nc l ud e s at le ast as many e ntr ie s as sa i d curr e nt 
i nstruct i on i nc l udes operands; 

unstack i ng and v e r i fy i ng that typ e s of e ntr ie s at th e top of sa i d stack ar e 
subtypes of the typos of sa i d operands of sa i d current i nstruct i on; 
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verifying an existence of a sufficient memory space on said type stack to proceed 
to stack the results of said current instruction^ 

stack i ng data typ e s wh i ch ar e assign e d to sa i d r e su l ts on sa i d stack. 

Claim 20. (Currently Amended) An embedded system which can be 
reprogrammed by downloading program fragments, said embedded system including at 
least one microprocessor, one random-access memory, one input/output module, one 
electrically reprogrammable nonvolatile memory and one permanent memory, an 
installed main program and a virtual machine adapted to execute said installed main 
program and at least one program fragment using said microprocessor, wherein said 
embedded system includes at least one verification program module to verify a 
downloaded program fragment in accordance with a process comprising: 

initializing a type stack and a table of register types through data representing a 
state of said virtual machine at a starting of an execution of said temporarily stored 
object code; 

carrying out a verification process of said temporarily stored object code 
instruction by instruction, by discerning an existence, for each current instruction, of a 
target, a branching-instruction target, a target of an exception-handler call or a target of 
a subroutine call, and, said current instruction being a target of a branching instruction, 
said verification process including verifying that said type stack is empty and rejecting 
said program fragment otherwise; 

carrying out a verification process and updating of an effect of said current 
instruction on the data types of said type stack and of said table of register types; 



Application/Control Number: 10/069,670 Page 5 

Art Unit: 2445 

verifying and updating an effect of said current instruction on the data types of 
said type stack and of said table of register types including: 

verifying that said type stack includes at least as many entries as said current 
instruction includes operands: 

unstacking and verifying that types of entries at the top of said stack are 
subtypes of the types of said operands of said current instruction: and 

stacking data types which are assigned to said results on said stack : 

said verification process being successful when said table of register types is not 
modified in the course of a verification of all of said instructions, and said verification 
process being carried out instruction by instruction until said table of register types is 
stable, with no modification having taken place, said verification process being 
interrupted and said program fragment being rejected, otherwise; 

said verification program module being installed in said permanent memory. 

Claim 22. (Currently Amended) A system for transforming an object code of a 
program fragment including a series of instructions, in which operands of each 
instruction belong to data types manipulated by said instruction, an execution stack 
does not exhibit any overflow phenomenon and for each branching instruction, the types 
of stack variables at said branching are identical to the types of stack variables at 
targets of this branching, and an operand, of given type, written to a register by an 
instruction of said object code is reread from the same register by another instruction of 
said object code with the same given data type, into a standardized object code for said 
program fragment, wherein said transforming system includes, at least, installed in a 
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memory of a development computer or workstation, a program module for transforming 
said object code into a standardized object code in accordance with a process of 
transforming including for all instructions of said object code comprising: 

annotating each current instruction with the data type of said type stack before 
and after execution of said current instruction, with an annotation data being calculated 
by means of analysis of the data stream relating to said current instruction; 

detecting, within said instructions and within each current instruction, an 
existence of branchings, or respectively of branching-targets, for which said execution 
stack is not empty, said detecting operation being carried out on the basis of said 
annotation data of said type of stack variables allocated to each current instruction; and, 
in case of detection of a non-empty execution stack, 

inserting instructions to transfer stack variables on either side of each said 
branching or branching target respectively, in order to empty contents of said execution 
stack into temporary registers before said branching and to reestablish said execution 
stack from said temporary registers after said branching; aftd 

not inserting any transfer instruction otherwise, this method allowing thus to 
obtain said standardized object code for said program fragment, in which said operands 
of each instruction belong to the data types manipulated by said instruction, said 
execution stack does not exhibit any overflow phenomenon, said execution stack is 
empty at each branching instruction and at each branching -target instruction, in the 
absence of any modification to the execution of said program fragment ; and 
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verifying and updating an effect of said current instruction on the data types of 
said type stack including: 

verifying that said type stack includes at least as many entries as said current 
instruction includes operands: 

unstacking and verifying that types of entries at the top of said stack are 
subtypes of the types of said operands of said current instruction: and 

stacking data types which are assigned to said results on said stack: and 

carrying out a verification process, said verification process being successful 
when a table of register types is not modified in the course of a verification of all said 
instructions, and said verification process being carried out instruction by instruction 
until said table of register types is stable, with no modification having taken place, said 
verification process being interrupted and said program fragment being rejected. 
otherwise. 

Claim 24. (Currently Amended) A computer program product which is recorded 
on a computer readable storage medium and can be loaded directly from a terminal into 
an internal memory of a reprogrammable embedded system equipped with a 
microprocessor and a rewritable memory, said embedded system making it possible to 
download and temporarily store a program fragment consisting of an object code 
including a series of instructions, executable by said microprocessor by way of a virtual 
machine equipped with an execution stack and with operand registers manipulated via 
said instructions and making it possible to interpret said object code, said computer 
program product including portions of object code to execute at least one of steps of 
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verifying a program fragment downloaded onto said embedded system according to a 
verifying process, said verifying process comprising: 

initializing a type stack and a table of register types through data representing a 
state of said virtual machine at initialization of execution of said temporarily stored 
object code; 

carrying out a verification process of said temporarily stored object code 
instruction by instruction, by discerning an existence, for each current instruction, of a 
target, a branching-instruction target, a target of an exception-handler call or a target of 
a subroutine call, and, said current instruction being a target of a branching instruction, 
said verification process consisting in verifying that said execution stack is empty and 
rejecting said program fragment otherwise; 

carrying out a verification process and an updating of an effect of said current 
instruction on the data types of said type stack and of said table of register types; and 

verifying and updating an effect of said current instruction on the data types of 
said type stack and of said table of register types including: 

verifying that said type stack includes at least as many entries as said current 
instruction includes operands; 

unstacking and verifying that types of entries at the top of said stack are 
subtypes of the types of said operands of said current instruction; and 

stacking data types which are assigned to said results on said stack ; 

said verification process being successful when said table of register types is not 
modified in the course of a verification of all said instructions, and said verification 
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process being carried out instruction by instruction until said table of register types is 
stable, with no modification having taken place, said verification process being 
interrupted and said program fragment being rejected, otherwise. 

Claim 25. (Currently Amended) A computer program product which is recorded 
on a computer readable storage medium including portions of object code to execute 
steps of a process of transforming an object code of a downloaded program fragment 
into a standardized object code for said program fragment said process of transforming 
comprising: 

annotating each instruction with a data type of a stack before and after execution 
of said current instruction, with said annotation data being calculated by means of an 
analysis of a data stream relating to said current instruction; 

detecting, within said instructions and within each current instruction, an 
existence of branchings, or respectively of branching [[-]] targets, for which an execution 
stack is not empty, said detecting operation being carried out eft based on said 
annotation data of a type of stack variables allocated to each current instruction, and, in 
case of detection of a non-empty execution stack[[;]] : 

inserting instructions to transfer stack variables on either side of each said 
branching or branching target respectively, in order to empty contents of said execution 
stack into temporary registers before said branching and to reestablish the execution 
stack from said temporary registers after said branching; and 

not inserting any transfer instruction otherwise, this method allowing thus: 
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to obtain said standardized object code for said program fragment, in 
which the operands of each instruction belong to the data types manipulated by 
said instruction, said execution stack does not exhibit any overflow phenomenon, 
said execution stack is empty at each branching instruction and at each 
branching-target instruction, in absence of any modification to an execution of 
said program fragment : and 

to verify any update an effect of said current instruction on a data type of a 
type stack including: 

verifying that said type stack includes at least as many entries as 

said current instruction includes operands: 

unstacking and verifying that types of entries at the top of said 

stack are subtypes of the types of said operands of said current 

instruction: 

stacking data types which are assigned to said results on said 
stack: and 

to carry out a verification process, said verification process being 
successful when a table fo register types is not modified in the course of a 
verification of all said instructions, and said verification process being carried out 
instruction by instruction until said table of register types is stable, with no 
modification having taken place, said verification process being interrupted and 
said program fragment being rejected, otherwise . 
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Claim 26. (Currently Amended) A computer program product which is recorded 
on a computer readable storage medium and can be used in a reprogrammable 
embedded system, equipped with a microprocessor and a rewritable memory, said 
reprogrammable embedded system allowing to download a program fragment 
consisting of an object code, a series of instructions, executable by said microprocessor 
of said reprogrammable embedded system by means of a virtual machine equipped 
with an execution stack and with local variables or registers manipulated via instructions 
and making it possible to interpret said object code, said computer program product 
comprising: 

program resources which can be read by said microprocessor of said embedded 
system via said virtual machine, to command execution of a procedure for managing a 
downloading of a downloaded program fragment; 

program resources which can be read by said microprocessor of said embedded 
system via said virtual machine, to command execution of a procedure for verifying, by 
instruction, said object code which makes up said program fragment including: 

program resources for verifying and updating an effect of said instruction 
on a data type of a type stack and of a table of register types including: 

verifying that said type stack includes at least as many entries as 
said current instruction includes operands; 

unstacking and verifying that types of entries at the top of said type 
stack are subtypes of the types of said operands of said current 
instruction; and 
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stacking data types which are assigned to said results on said 
stack: and 

program resources for carrying out a verification process, said verification 
process being successful when said table of register types is not modified in the 
course of a verification of all said instructions, and said verification process being 
carried out instruction by instruction until said table of register types is stable, 
with no modification having taken place, said verification process being 
interrupted and said program fragment being rejected, otherwise : 
program resources which can be read by said microprocessor of said embedded 
system via said virtual machine, to command execution of a downloaded program 
fragment subsequent to or in the absence of a conversion of said object code of said 
program fragment into a standardized object code for this same program fragment. 

The following is an examiner's statement of reasons for allowance: Applicant's 
added elements to the independent claims involving the verification elements of 
"verifying and updating an effect of said current instruction on the data types of said 
type stack and of said table of register types including: verifying that said type stack 
includes at least as many entries as said current instruction includes operands; 
unstacking and verifying that types of entries at the top of said stack are subtypes of the 
types of said operands of said current instruction; and stacking data types which are 
assigned to said results on said stack; said verification process being successful when 
said table of register types is not modified in the course of a verification of all said 
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instructions, and said verification process being carried out instruction by instruction 
until said table of register types is stable, with no modification having taken place, said 
verification process being interrupted and said program fragment being rejected, 
otherwise" are not taught in the prior art. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jeffrey R. Swearingen whose telephone number is 
(571 )272-3921 . The examiner can normally be reached on M-F 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Vivek Srivastava can be reached on 571-272-7304. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Jeffrey R. Swearingen 

Examiner 

Art Unit 2445 

/J. R. S.l 

Examiner, Art Unit 2445 
/Rupal D. Dharia/ 

Supervisory Patent Examiner, Art Unit 2400 



